* Re: CVE-2024-27406: lib/Kconfig.debug: TEST_IOV_ITER depends on MMU [not found] <2024051739-CVE-2024-27406-cfc3@gregkh> @ 2024-05-17 17:42 ` Michal Koutný 2024-05-19 8:53 ` Greg Kroah-Hartman 0 siblings, 1 reply; 2+ messages in thread From: Michal Koutný @ 2024-05-17 17:42 UTC (permalink / raw) To: cve, linux-kernel; +Cc: linux-cve-announce, Greg Kroah-Hartman [-- Attachment #1: Type: text/plain, Size: 471 bytes --] On Fri, May 17, 2024 at 01:40:41PM GMT, Greg Kroah-Hartman <gregkh@linuxfoundation.org> wrote: > BUG: failure at mm/nommu.c:318/vmap()! > Kernel panic - not syncing: BUG! > > The test calls vmap() directly, but vmap() is not supported on nommu > systems, causing the crash. TEST_IOV_ITER therefore needs to depend on > MMU. This is fixing mising assumption of a testing module. The BUG is deserved AFAIU. The CVE should be reverted IMO. Thanks, Michal [-- Attachment #2: signature.asc --] [-- Type: application/pgp-signature, Size: 228 bytes --] ^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: CVE-2024-27406: lib/Kconfig.debug: TEST_IOV_ITER depends on MMU 2024-05-17 17:42 ` CVE-2024-27406: lib/Kconfig.debug: TEST_IOV_ITER depends on MMU Michal Koutný @ 2024-05-19 8:53 ` Greg Kroah-Hartman 0 siblings, 0 replies; 2+ messages in thread From: Greg Kroah-Hartman @ 2024-05-19 8:53 UTC (permalink / raw) To: Michal Koutný; +Cc: cve, linux-kernel, linux-cve-announce On Fri, May 17, 2024 at 07:42:14PM +0200, Michal Koutný wrote: > On Fri, May 17, 2024 at 01:40:41PM GMT, Greg Kroah-Hartman <gregkh@linuxfoundation.org> wrote: > > BUG: failure at mm/nommu.c:318/vmap()! > > Kernel panic - not syncing: BUG! > > > > The test calls vmap() directly, but vmap() is not supported on nommu > > systems, causing the crash. TEST_IOV_ITER therefore needs to depend on > > MMU. > > This is fixing mising assumption of a testing module. > The BUG is deserved AFAIU. The CVE should be reverted IMO. Many people/distros run the built-in unit tests at boot time, and having crashes is not a good idea. So if you don't enable this option, great, this CVE isn't relevent, but if you do, it's an in-kernel crash which is not good, and this is the fix for that. So I don't think this CVE should be rejected, sorry. thanks, greg k-h ^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2024-05-19 8:53 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
[not found] <2024051739-CVE-2024-27406-cfc3@gregkh>
2024-05-17 17:42 ` CVE-2024-27406: lib/Kconfig.debug: TEST_IOV_ITER depends on MMU Michal Koutný
2024-05-19 8:53 ` Greg Kroah-Hartman
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®